What is CVE-2021-22507?

CVE-2021-22507 is a critical-severity vulnerability in Microfocus Operations_bridge_manager, classified under Improper Authentication. CVSS score: 9.8/10. Published 2021-04-08.

How severe is CVE-2021-22507?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Auth bypass in Microfocus Operations_bridge_manager

CVE-2021-22507

Authentication bypass vulnerability in Micro Focus Operations Bridge Manager affects versions 2019.05, 2019.11, 2020.05 and 2020.10. The vulnerability could allow remote attackers to bypass user authentication and get unauthorized access.

Vulnerability class: Broken Authentication

EPSS: 0.017 (74.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Microfocus Operations_bridge_manager — versions 2019.05, 2019.11, 2020.05
N/a Operations Bridge Manager — versions 2019.05, 2019.11, 2020.05

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

security@opentext.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2021-22507?: CVE-2021-22507 is a critical-severity vulnerability in Microfocus Operations_bridge_manager, classified under Improper Authentication. CVSS score: 9.8/10. Published 2021-04-08.
How severe is CVE-2021-22507?: Critical severity. CVSS v3 base score is 9.8 out of 10.